Privacy Policy
1. Introduction
Welcome to Forjum ("we," "our," or "us"). This Privacy Policy explains what data the Forjum mobile app and its watch apps (the "App") use, where that data is processed, and the choices you have.
Forjum is a fitness and wellness app that turns your real physiological data into the five stats of an RPG character. The short version: your health data is processed on your device and never leaves it. Online features use only game data, and the optional cloud backup contains your game progress, not your health data.
Contact Information:
Email: forjumapp@gmail.com
Developer: Forjum App
Location: Switzerland
2. Data We Use
2.1 Health and Fitness Data (on your device only)
With your permission, the App reads the following from Apple Health (HealthKit) on iPhone or Health Connect on Android, and from the sensors of your Apple Watch or Wear OS watch during activities:
- Heart data: heart rate, resting heart rate, heart rate variability (HRV)
- Activity data: steps, active energy, exercise minutes
- Workout data: workout type, duration and intensity
- Sleep data: sleep duration and stages
- Cardio fitness: VO2 Max estimates
- Body measurements: height and weight, if available
2.2 Profile Information
Information you provide when you create your character:
- Character name (can be fictional) and icon. When you create your character, the name is sent once to our servers only to check that no other player uses it; it is stored only when you turn on online play.
- Age and biological sex (for physiological calculations)
- Gender identity (optional)
- Height and weight (for the avatar and physiological calculations)
- Answers to the optional guided questionnaire (training habits, sleep, and whether you have joint pain or chronic conditions). These answers stay on your device.
- Preferred language
2.3 Location Data (on your device only)
With your permission, the App may use your location to infer where you sleep, for the Social Presence minigame. This inference runs on your device; location data is not transmitted to any server. Regional dialects for Presence duels are chosen manually and do not use your location.
2.4 Account (optional)
The App creates an anonymous profile automatically and works without an account. Online features and the cloud backup use a free sign-in with Google or Apple (Firebase Authentication), so your online identity survives a reinstall. The sign-in provides an account identifier and, depending on the provider, your email address. With Apple you can hide your email address.
2.5 Online Play Data
When you use online features (Duels, Co-op, Avatar fights, Help Board, Clans and Rankings), the following game data is stored on our servers (Firebase Realtime Database, European Union):
- Identifiers: a random device ID, linked to your sign-in account
- Public profile: character name, icon and language; for the rankings also your country. Your character name is reserved for your account, so no other player can use it.
- Avatar: your avatar's five stats (game scores from 0 to 100 calculated on your device) and fighting style, visible to other players for Avatar fights
- Game results: minigame scores, match and fight results, weekly effort points (a 0–100 game score) for the rankings
- Clans: clan name and icon, membership and rank, the last time you opened the App while in a clan (to manage inactive members), the messages you write in the clan chat (text and emoji), and moderation records: reported messages (a copy of the text and who wrote it; reporters stay anonymous to the clan), mutes and bans. Each message also carries your profile age, so text opens from 16, and your device language for the word filter; neither is stored.
- Help Board: your requests and the in-game items you give
- Online status: whether you are available for live play
- Push token: used to deliver notifications about challenges and fights
2.6 Cloud Backup (optional, Supporter and Premium)
Supporter and Premium subscribers with a linked account can turn on a cloud backup to find their character again on another phone. The App asks for your consent before the first backup. The backup contains:
- Your character's stats and status, potions and scrolls
- Profile: name, age, sex, gender identity if given, height and weight
- How each minigame adapted to you (difficulty level and recent scores)
- Your activities of the last 4 weeks: type, duration and intensity
It does not contain heart rate, HRV, sleep, health averages or your questionnaire's health answers: after a restore they are recomputed from Apple Health or Health Connect. You can turn the backup off at any time in Profile → Account; turning it off deletes it from our servers.
2.7 Device and Usage Data
- Device type, operating system and app version
- Crash reports and performance data
- Anonymous feature usage statistics
You can turn off usage statistics and crash reports in the App's Privacy Settings.
2.8 Purchase Information
- Subscription tier and status, purchase and expiry dates
- Transaction identifiers (processed by Apple, Google and RevenueCat)
Note: We never receive or store your payment card details.
3. How We Use Your Data
| Purpose | Data Used | Where | Legal Basis |
|---|---|---|---|
| Calculating stats, readiness and recommendations | Health and fitness data, profile | Your device | Your explicit consent (health permissions) |
| Adapting minigame difficulty | Game performance, profile | Your device | Contract (providing the App) |
| Online play, clans and rankings | Online play data (2.5), account | Our servers (EU) | Contract (providing the features you use) |
| Cloud backup | Backup contents (2.6), account | Our servers (EU) | Your consent |
| Push notifications | Push token | Our servers, Google/Apple | Your consent (notification permission) |
| Processing subscriptions | Purchase data, account identifier | Apple, Google, RevenueCat | Contract |
| Improving stability and the App | Crash reports, anonymous usage statistics | Google Firebase | Legitimate interest (you can opt out) |
4. Data Storage and Security
4.1 On Your Device
Your health data, questionnaire answers, location inference and full history are stored only on your device.
4.2 On Our Servers
Online play data, account links and the optional backup are stored in Firebase Realtime Database in the European Union (Belgium), protected by access rules: your backup can be read only by your own account. Server functions run in the European Union.
4.3 Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Apple HealthKit / Health Connect | Reading health data on your device | None (read only, on device) |
| Firebase Authentication | Optional Google or Apple sign-in | Account identifier, email address (depending on the provider) |
| Firebase Realtime Database and Cloud Functions | Online play, clans, rankings, cloud backup | Data in sections 2.5 and 2.6 |
| Firebase Cloud Messaging | Push notifications | Push token |
| Firebase Crashlytics | Crash reporting | Crash logs, device information |
| Firebase Analytics | Anonymous usage statistics | Anonymous events, device type, OS version |
| Firebase App Check | Protecting our servers from abuse | Device attestation token |
| RevenueCat | Subscription management | App user ID, purchase status |
Some of these services (Firebase Crashlytics, Analytics and Cloud Messaging, RevenueCat) may process data outside Switzerland and the EU, under the safeguards provided by those companies (such as the EU Standard Contractual Clauses).
5. Data Sharing
We do not sell your personal data, and we do not use advertising or tracking SDKs.
- Other players see your character name, icon, avatar stats, game results, ranking position, clan and clan messages.
- Service providers listed in section 4.3, only for the purposes listed there.
- Legal requirements: if required by law or valid legal process.
6. Your Rights
6.1 For All Users
- Deletion: Profile → Account → Delete Account deletes your data on the device and, on our servers, your clan membership and clan messages, effort points, avatar, backup and sign-in account.
- Backup: turn the cloud backup on or off at any time in Profile → Account.
- Health permissions: revoke them at any time in Apple Health or Health Connect.
- Usage statistics and crash reports: turn them off in the App's Privacy Settings.
- Access and portability: ask us for a copy of the data we hold on our servers.
6.2 For Users in Switzerland and the EU (FADP / GDPR)
You also have the right to rectification, to restrict or object to processing, to withdraw consent at any time, and to lodge a complaint with a supervisory authority.
6.3 For California Users (CCPA)
You have the right to know what personal information is collected, to delete it, and to non-discrimination for exercising your rights. We do not sell personal information.
How to Exercise Your Rights
- In the App: Profile → Account
- Email: forjumapp@gmail.com
We will respond to requests within 30 days.
7. Data Retention
| Data | Retention |
|---|---|
| Health data and character on your device | Until you delete your account or the App |
| Cloud backup | Replaced at every backup; deleted when you turn it off or delete your account |
| Account link, avatar, clan membership, clan messages, effort points | Until you delete your account (clan chat keeps only the most recent messages; reported messages are deleted 30 days after they are handled; mutes and bans last until they expire or are lifted) |
| Character name reservation | Until you delete your account; a name not used for 30 days can be chosen by another player |
| Live fights and live challenges | Deleted within 24 hours after they end |
| Match and fight results | Kept as game history; they contain your character name and scores, never health data |
| Purchase history | As required by tax and legal obligations |
| Crash logs | 90 days |
8. Children's Privacy
Forjum is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children.
9. Health Data Disclaimer
- Diagnose, treat, cure, or prevent any disease
- Replace professional medical advice
- Make medical decisions
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by displaying a notice in the App and updating the date above.
11. Contact Us
If you have questions about this Privacy Policy or your data:
Email: forjumapp@gmail.com
Subject Line: Privacy Inquiry - Forjum